[00:24.520 --> 00:29.840]  Welcome to DEF CON Safe Mode. I'm the Dark Tangent. I'll be your host, along with hundreds
[00:29.840 --> 00:35.960]  and hundreds of other goons, contest organizers, village organizers, and other creatives, trying
[00:35.960 --> 00:43.360]  to build you a virtual experience for... I have a placement for... Missing Las Vegas!
[00:44.860 --> 00:49.000]  Far from Las Vegas, I'm in Singapore, where I've been stuck since February,
[00:49.460 --> 00:52.160]  so I really am coming at you from the other side of the planet.
[00:52.840 --> 00:55.860]  Recording this just in case the live connection doesn't work.
[00:56.080 --> 01:02.120]  So, hopefully I'll be at the end of this recording, available for questions and answers,
[01:02.120 --> 01:05.540]  but if it doesn't work out, sorry, we tried our best.
[01:06.020 --> 01:12.300]  So, this is the part of DEF CON where, normally, I talk a little bit about the history of the con,
[01:12.300 --> 01:18.500]  what can be expected for the new year, some cool surprises, how to get the most out of it,
[01:18.500 --> 01:25.240]  but really, honestly, I don't really know what to tell you a whole lot, besides we're online.
[01:25.720 --> 01:33.120]  It's new, exciting, the theme this year is discovery. Our color palette are these nice,
[01:33.120 --> 01:38.720]  bright pastel colors, and we're trying to evoke sort of a sense of wonder, discovery,
[01:38.720 --> 01:42.660]  new exploration, and there's going to certainly be a lot of that this weekend.
[01:43.420 --> 01:49.080]  If you look at what the villages are doing, contests and events, so many different platforms
[01:49.080 --> 01:56.720]  online, we're really stress testing this environment to see what an online community like ours would
[01:56.720 --> 02:03.020]  be like. So, I'm really kind of excited to do this, and I'm really terrified at the same time,
[02:03.020 --> 02:10.520]  because this is a lot of skills that we don't exercise in Vegas, and we're all about real life
[02:10.520 --> 02:17.360]  and in-person, face-to-face, and this is at a distance with keyboards and video chat and memes.
[02:18.460 --> 02:24.040]  So, I've been watching everybody on LimeCon for the last week, and some great conversations are
[02:24.040 --> 02:28.360]  happening. I just don't know what's going to happen when we go live. So, I hope to see you
[02:28.360 --> 02:37.860]  out there. So, let me talk a little bit about the decision to go live with Discord and a new
[02:37.860 --> 02:44.460]  platform for us. So, when I decided to cancel the in-person, I mean, if you read my post, it was
[02:44.460 --> 02:51.520]  pretty clear nothing was going to happen in the States, and we've been totally, totally
[02:51.520 --> 02:56.140]  borne out that that was the right decision. I mean, everything's canceled in the States, forever, as
[02:56.140 --> 03:02.740]  far as I can tell. So, online it is. It's going to be online for a while. So, we quickly had to discover
[03:02.740 --> 03:09.880]  how could we do this? And we made a post on forum.defton.org, talked about a whole lot of
[03:09.880 --> 03:15.600]  different platforms. Do we want to do VR with cartoon-like characters? Do we want to build a
[03:15.600 --> 03:22.720]  world? Do we want to have it text-only? In the end, it was pretty much down to Riot, which has been
[03:22.720 --> 03:30.640]  renamed now, and Discord. And we went with Discord because it had a longer history. Gamers are pretty
[03:30.640 --> 03:34.340]  abusive, and so their platform has been beaten up quite a bit, and they've got some pretty good
[03:34.340 --> 03:42.300]  moderation and server stability experience. And it was pretty extensible. A lot of people have built
[03:42.300 --> 03:48.980]  stuff on top of Discord. So, here we are. Now, in the last three months, Riverside, some of the guys
[03:48.980 --> 03:54.600]  from Wall of Sheep, some of the DEF CON crew, and others have pulled together and really, in three
[03:54.600 --> 03:59.920]  months, two months, done about a year's worth of work building this Discord server that you're now
[03:59.920 --> 04:11.000]  on. Please be gentle. We're in beta. This is like Google beta, I guess. So, there's a lot of different
[04:11.000 --> 04:15.080]  things to explore here. And I'm just going to give you a quick overview, and then we're going to move
[04:15.080 --> 04:20.140]  on to talk about some of the cool things happening with the show. So, first off, with Discord,
[04:20.140 --> 04:25.440]  anybody can report an issue. Everybody on the platform has to comply with the DEF CON Code of
[04:25.440 --> 04:32.100]  Conduct. And because we're guests on Discord's platform, we also have to comply with the Discord's
[04:32.100 --> 04:38.720]  Code of Conduct. And there's reporting tools. You can file a report, or a ticket, as we call it, and
[04:38.720 --> 04:45.060]  get a goon to help. If you see a goon in red there on the right-hand side, you can message them and
[04:45.060 --> 04:51.940]  ask them for help. And then also, there's Discord moderation that can help. And if you have any
[04:51.940 --> 04:57.440]  questions during operating hours, just go ask the info booth. They're there to help. They're at the
[04:57.440 --> 05:02.100]  top in the upper left-hand of your channel selection. And once you learn a couple of tricks,
[05:02.100 --> 05:08.280]  like Ctrl-K to jump to channels, you should start zooming around, and it'll feel more comfortable.
[05:09.900 --> 05:16.960]  So, we're trying something new this year. We're taking all the talks, all the videos of the talks,
[05:16.960 --> 05:23.720]  the presentations, PDFs, the music, album, everything, the original soundtrack, and we're dumping it all at once
[05:24.360 --> 05:31.680]  on Wednesday. So, by the time you've seen this, Thursday or Friday, I don't even know when we're
[05:31.680 --> 05:36.740]  playing this right now, by the time you see this, all the videos, all the speeches, everything
[05:36.740 --> 05:41.040]  will become available. We've never done that before because we've never had the speeches ahead
[05:41.040 --> 05:46.180]  of time. And what we're hoping to do is allow you to time shift. There's a lot of other villages
[05:46.180 --> 05:52.240]  and content that aren't doing that. They're going live. And we thought, well, if they're going live,
[05:52.240 --> 05:58.380]  maybe we go pre-recorded and give you some more options to watch however you want. And then,
[05:58.380 --> 06:05.960]  what we are doing live, our big risky maneuver, is every day, all day, from Thursday to Saturday,
[06:05.960 --> 06:11.660]  Sunday, we're having Q&A sessions. So, if you see a talk that you like and you want to interact with
[06:11.800 --> 06:18.620]  a speaker, you get a half an hour every day on each talk. So, just go to the DEF CON.org website,
[06:18.620 --> 06:28.060]  look at the schedule, you'll see when the Q&As are happening. So, you'll also notice at the end
[06:28.060 --> 06:34.860]  of the day, we're operating in Pacific time zone, UTC-7, for those of you not familiar with
[06:35.320 --> 06:41.500]  Americanisms. We close a lot of the rooms at night. And this is because we don't want to burn out our
[06:41.500 --> 06:47.200]  moderators and our goons waiting around in rooms where nobody's participating. So, you'll see a lot of
[06:47.200 --> 06:52.120]  rooms lock at night. You might see some with a tag that says closed. You might see some disappear,
[06:52.120 --> 06:57.260]  depending upon how they're closing their room. But, in the end, they'll pop back up the next day
[06:57.260 --> 07:06.540]  during normal hours, Pacific time. So, yeah, pretty excited about this. I've got my refrigerator
[07:06.540 --> 07:12.700]  stock. I've got my caffeine. I've got my stimulants and my alcohol depressants, depending upon what
[07:12.700 --> 07:19.500]  situation presents itself. We're recording and capturing as much as we can. A lot of the villages
[07:20.220 --> 07:26.460]  and contests are recording as well on Twitch or YouTube. And so, after the CON, we'll start
[07:26.460 --> 07:32.260]  gathering all of this video and content and results, and we'll start sharing it with the
[07:32.260 --> 07:37.220]  community. So, if you miss something, hopefully, maybe it'll have gotten captured and you'll be
[07:37.220 --> 07:44.420]  able to see it after the fact. And for those of you who became human pluses to help support us
[07:44.420 --> 07:49.880]  on the server with a little bit of money, that's really appreciated. We've never done a free event
[07:49.880 --> 07:56.060]  because there's always costs. But this year, it was such a special occasion, DEF CON is canceled,
[07:56.060 --> 08:01.600]  that I really wanted to give something back to the community. We're all in a pretty stressful
[08:01.600 --> 08:10.940]  place with COVID. I mean, everybody has somebody that has been impacted by it. And anyway, I just
[08:10.940 --> 08:15.940]  wanted to make everything open to our community and make this sort of a time of celebration and
[08:15.940 --> 08:22.340]  discovery. Get us connected one way or the other, because we can't see each other in person in Vegas.
[08:22.540 --> 08:31.280]  So, yeah. So, this is the best I can do, and I hope it's enough. Now, to bring you closer
[08:31.280 --> 08:38.120]  together and make new friends, we always have contests. And one of the contests this year was
[08:38.120 --> 08:45.000]  the badge contest. So, if you purchased a badge, which was a cassette tape, which was kind of a
[08:45.000 --> 08:52.660]  play on the last time the Lost Boy did a badge for us. It was a record, if you remember that.
[08:52.660 --> 08:59.740]  But encoded onto audio, and in the program, liner notes, and in the lanyard, there were clues and
[08:59.740 --> 09:05.720]  hints. And this is really meant to be a challenge for you to explore before the con. And then during
[09:05.720 --> 09:11.440]  the con, Lost is deploying one of his super famous mystery challenges. This is a full-blown mystery
[09:11.440 --> 09:17.140]  challenge. So, things that were on the badge, badge challenge. Don't get them confused with
[09:17.140 --> 09:22.260]  things you're going to see on the forums, which is the mystery challenge. And Lost is primarily
[09:22.260 --> 09:29.020]  going to perform the mystery challenge contest on forum.defcon.org. But I'd like to introduce
[09:29.020 --> 09:33.760]  him next, so he can tell you all about the craziness of making a cassette badge at the last
[09:33.760 --> 09:39.080]  possible minute. Putting in a puzzle, getting the audio encoded, and then building a mystery
[09:39.080 --> 09:46.240]  challenge. And what he's trying to get you to do. An experience for this show. So, if you don't know
[09:46.240 --> 09:53.140]  Lost, he's a longtime super contributor to DEF CON. Sort of a jack-of-all-trades. I think he's
[09:53.140 --> 09:59.040]  been everything you can be from a school teacher, to a linguist, to a police officer, to super
[09:59.040 --> 10:04.320]  computer hacker, to cryptographer. He's kind of done a little bit of everything. I'm very envious
[10:05.100 --> 10:14.120]  of his skill set. But he also has a great inquisitive mind and is very detail-oriented
[10:14.120 --> 10:19.880]  when he gets into music and puzzles. And so, hopefully you've experienced some of his puzzles
[10:19.880 --> 10:24.960]  in the past. And if you haven't, hey, this is a great chance for you to get involved and start
[10:24.960 --> 10:30.680]  either at the ground floor with the badge challenge. I mentioned the badge challenge. If you don't have
[10:30.680 --> 10:36.580]  the badge, that's okay. All the materials are online for free on the DEF CON media server,
[10:36.580 --> 10:40.860]  media.defcon.org. So, you can still play along. You just won't have the physical item, but you'll
[10:40.860 --> 10:48.040]  have all the audio files. Anyway, I'm distracted. Now, it's my pleasure to introduce you to Lost
[10:48.040 --> 10:57.580]  Boy, if you haven't met him before. And take it away, Virtual Lost Boy. Thank you, Jeff.
[10:58.520 --> 11:06.300]  Hello, everybody. Welcome to DEF CON Save Mode. I hope everybody is doing well in spite of these
[11:06.300 --> 11:13.560]  challenging times. First and foremost, I'd like to thank DT for letting us even have a badge
[11:14.080 --> 11:18.060]  and making that happen and making that possible in spite of the fact that we're in
[11:18.720 --> 11:27.360]  the wonderful COVID times that we are. I'd like to also thank Neil and Nikita in Darrington for
[11:27.360 --> 11:34.560]  the help that they put forth on making sure that the badge happened, as well as to NellyBot
[11:35.340 --> 11:43.020]  for the assistance on the lanyard artwork as well. For those of you who are working on the puzzle or
[11:43.020 --> 11:49.040]  recognize that there is a puzzle in the lanyard, obviously, you've been focusing on that there.
[11:49.040 --> 11:56.360]  The only recommendation or hint I could give at this point in time would be to shave a little
[11:56.360 --> 12:01.000]  closer with Occam's razor. Don't overcomplicate things. Don't make it more complicated than it
[12:01.000 --> 12:06.500]  needs to be. Some people have already figured out quite a few clever things. I would recommend that
[12:06.500 --> 12:13.380]  you check out the forums or talk to some folks in some of the chat rooms here on the Discord
[12:14.260 --> 12:19.440]  for that. Recently, as you can probably see from around me, I've been really into
[12:20.320 --> 12:27.140]  music and synthesizers, such as this record here, the Happy Moog. And it is Moog, it's not Moog.
[12:27.240 --> 12:33.340]  There's a modular synthesizer there. It seems that synthesizers in the hacker community have
[12:33.340 --> 12:38.700]  that Venn diagram. It tends to overlap quite a bit. Same thing with electronics and those that
[12:38.700 --> 12:45.680]  are building things. I mean, clear back when we had folks like Forest Mims giving us RadioShack
[12:45.680 --> 12:52.420]  books and showing us how to build electronic music instruments. So along with that, during
[12:53.000 --> 13:00.120]  my earlier years, one of the things that always meant a lot and was a demonstration of a lot of
[13:00.120 --> 13:06.900]  thought and emotion behind it was the concept of the mixtape, which I think the younger generation
[13:06.900 --> 13:12.120]  just won't have a need to understand because you carry all of your music around with you on your
[13:12.120 --> 13:16.680]  phone or you have access to it or you stream it. But back in the day, you used to have to sit and
[13:16.680 --> 13:25.080]  listen to the radio for hours and then tape your favorite songs in order to get them so you could
[13:25.080 --> 13:33.000]  listen to them when you wanted to. The cassette tape was the medium that tended to follow right
[13:33.000 --> 13:39.980]  after LPs and records. There were other tape technologies such as the 8-track, which was a
[13:39.980 --> 13:44.520]  continuous loop tape, which is very interesting if you don't know how an 8-track works. The tape
[13:44.520 --> 13:50.360]  is wound around a single spool and is fed actually from the middle. It goes around the roller and the
[13:50.360 --> 13:53.660]  tensioner and then gets wrapped back around the outside and it's self-tensioning. That's why an
[13:53.660 --> 13:59.640]  8-track tape doesn't have any access to the winders or the rollers. I've already seen several
[13:59.640 --> 14:06.280]  people making reference in the forums and on Twitter about the relationship between a cassette
[14:06.280 --> 14:12.320]  tape and a pencil. For the younger generation, that's because when the tape would get caught up
[14:12.320 --> 14:19.320]  or not be tensioned properly, you'd shove a pencil through here and use it to wind the tape or spin
[14:19.320 --> 14:27.560]  it. This is, by the way, one of the original test tapes for the Defcon tape. This isn't the master,
[14:27.940 --> 14:33.180]  but it is one of the original test tapes. You can see a clear shell there.
[14:34.300 --> 14:40.580]  One of the early Goon prototype tapes. Experimenting with different colors. There's
[14:40.580 --> 14:46.480]  the red one. This one, if you notice, has no tape in it at the time. This is just a shell
[14:47.120 --> 14:55.800]  and the spindles have the clear take-up tape, which is connected. What the manufacturer will
[14:55.800 --> 14:59.840]  do is they'll come in and they'll splice that and they'll splice the other tape to it and then
[14:59.840 --> 15:07.060]  wind it up. That's how these are made. The shells for the Defcon badge this year came from Italy
[15:07.600 --> 15:13.280]  and the tapes themselves were fabricated and recorded here in the United States,
[15:13.280 --> 15:19.480]  on the East Coast, actually. What I was starting to say earlier was the mixtape...
[15:20.030 --> 15:28.360]  you made mixtapes for friends or family or whoever that showed that you went to the effort.
[15:28.360 --> 15:34.440]  Not only the order of the songs was important and the emotion behind why certain songs were
[15:34.440 --> 15:40.480]  chosen. I mean, some mixtapes were like somebody were dating. Sometimes it was a romantic gesture
[15:40.480 --> 15:47.120]  like, look, I spent all this time focused. And the thought behind it is I was thinking about you the
[15:47.120 --> 15:53.900]  whole time that I made this thing. And oftentimes it would be handwritten on there because it would
[15:53.900 --> 16:00.940]  be a blank tape that was recorded on home equipment. And there were actually... so we
[16:00.940 --> 16:05.880]  all now have... you wouldn't download a house. Well, back then they used to have advertisements
[16:05.880 --> 16:11.900]  would be like, tapes are killing the music industry, which it hasn't. Even the original
[16:11.900 --> 16:20.180]  Pirate Bay logo, you've all seen the cassette tape with the crossbones because the tape was
[16:20.180 --> 16:27.640]  really the first medium that allowed us to tape. It allowed us to record our music and create
[16:27.640 --> 16:34.840]  bootlegs, for example, about the same time you started having videotapes as well. But it gave
[16:34.840 --> 16:41.220]  people an opportunity to preserve music and have music. And as we can see, it didn't kill
[16:41.220 --> 16:48.960]  the record industry, unfortunately. I have my own thoughts on that. The human badges this year
[16:50.420 --> 16:58.340]  are the purple color tape there that you can see. We also made two other colors. The artists
[16:59.280 --> 17:04.780]  all got copies in yellow. It's kind of a neon yellow. I like that color.
[17:04.840 --> 17:11.480]  And all of the goons got a solid red tape. So the red tapes are actually very rare because,
[17:11.480 --> 17:14.680]  you know, we only made enough for the goons. Same thing with the artist tapes.
[17:17.580 --> 17:21.520]  The intent was, you know, people are going to be at home.
[17:22.240 --> 17:27.800]  They're not going to, we didn't think, sit and wear them around their neck as a lanyard. But
[17:27.800 --> 17:33.700]  one of the things I wanted to do, and I talked with DT about it, is I want to have kind of a
[17:33.700 --> 17:39.500]  mini contest that we're announcing right now, which hasn't gone public except for when someone
[17:39.500 --> 17:46.240]  on Twitter kind of forced my hand. We're looking for the most creative way that someone attaches
[17:46.240 --> 17:56.840]  their tape to their lanyard. Whether that's 3D printing, sculpting, action figure, clay, model,
[17:56.840 --> 18:05.840]  electronics. Pick a thing. I'm going to be talking in the badge forum about where you can
[18:05.840 --> 18:13.720]  send pictures or video submission about what you've done to me. And myself and DT and a couple
[18:13.720 --> 18:20.940]  other people will vote and we'll see who we think the most creative badge holder creator is. Bonus
[18:20.940 --> 18:27.000]  points if you make it in such a way that can be copied by other people, points for creativity,
[18:27.000 --> 18:30.800]  things like that. But it's kind of a mini contest that I wanted to do live that I didn't want to
[18:30.800 --> 18:36.900]  start until DEF CON actually started. Some other interesting facts about the tapes. So when I was
[18:36.900 --> 18:42.300]  talking to the fabricator, which by the way is the same house that does the tapes for places like
[18:42.300 --> 18:48.660]  Disney, which I thought was interesting, and then I started thinking about it and, well, no, there
[18:48.660 --> 18:54.380]  aren't that many tape fabrication houses anymore. So those that have the capacity to do a large run
[18:54.920 --> 19:00.000]  and do a professional quality run are limited these days. So it made sense that we wound up
[19:00.000 --> 19:05.680]  at somebody who would do something like tapes for Disney or for, you know, we kind of have a
[19:05.680 --> 19:13.400]  resurgence. There's a resurgence in like 80s pop culture interest lately in music too, although
[19:13.400 --> 19:18.060]  certain genres of music have been around for a while. Groups like Gunship seem to become, have
[19:18.060 --> 19:24.340]  become more popular recently, and kudos to them. After a live stream that I did, I do a live stream
[19:24.340 --> 19:29.260]  once a week where I talk about music science and hacking. Immediately following that stream, and
[19:29.260 --> 19:34.580]  I'd like to think I influenced it, although probably not, Gunship announced that you can
[19:34.580 --> 19:39.100]  use any of their music on live streams without worried about being worried about copyright. So
[19:39.100 --> 19:45.120]  kudos to them. They understand the next generation. But the tape, when it's being fabricated, goes
[19:45.120 --> 19:52.260]  through the machine at 60 miles an hour. Think about that. It's faster than most, like, most cars
[19:52.260 --> 19:57.860]  on the freeway when the freeway is jammed up. And the, if you think about the acceleration and
[19:57.860 --> 20:02.880]  deceleration for how fragile the tape itself is, to say that it's going at 60 miles an hour is
[20:02.880 --> 20:09.760]  pretty impressive. You think about how that, what that machine must be capable of doing.
[20:09.760 --> 20:15.400]  The other thing is that there is a six hertz tone that they use to tell where the breaks
[20:15.900 --> 20:23.260]  in the tape should be, as opposed to like the 8-track, who uses an actual piece that is spliced
[20:23.260 --> 20:27.680]  onto the tape. And unlike splicing of audio tape, where you would do it on the back because you
[20:27.680 --> 20:33.080]  wouldn't want it to go over the read head, on an 8-track it actually faces the read head, which I
[20:33.080 --> 20:38.800]  also find interesting. I keep mentioning 8-track tapes because I don't want to show them yet, but
[20:38.800 --> 20:46.260]  the Uber badge for this year is based on an 8-track tape. So there will be very, very few of
[20:46.260 --> 20:53.560]  those that DT will be giving out at closing ceremonies to winners of contests, but we made
[20:53.560 --> 20:58.780]  even fewer than we normally do, just because of the nature of where we're at in terms of COVID and
[20:58.780 --> 21:04.500]  everything else. But I wanted the tape to be something to be representative of thinking of
[21:04.500 --> 21:10.980]  friends, missing friends, wishing we were together, but instead of focusing on that
[21:10.980 --> 21:17.320]  negative aspect of that, something that brings people together. The contest side, the badge
[21:17.320 --> 21:25.060]  challenge, which for those of you who are new to DEF CON, there are often puzzle crypto slash
[21:25.640 --> 21:32.180]  pop culture slash picketh subject, I've probably ventured into it at least a little bit,
[21:32.180 --> 21:39.360]  puzzle challenges that are involved. And some are relatively easy, and some are incredibly
[21:39.360 --> 21:44.000]  difficult. And the range goes all the way from badge challenge up through mystery challenge,
[21:44.000 --> 21:50.560]  which is a separate contest. This year, specifically, if you get to a certain point,
[21:50.560 --> 21:55.420]  I was going to show you just the splash screen of a particular website that you will eventually get
[21:55.420 --> 22:38.230]  to. If you happen to hit that website, you're on the right track. And so you'll know that you're
[22:38.230 --> 22:42.950]  doing something right. If you were looking for other people to play the game with, try the DEF
[22:42.950 --> 22:51.750]  CON forums, or we will have some Discord channels that will be discussing badge challenge. And that
[22:51.750 --> 22:56.550]  might be a place to find other people that you can connect with even remotely to work on the
[22:56.550 --> 23:02.170]  puzzles together. Kind of like the crossword puzzles from the New York Times, right? I always
[23:02.170 --> 23:08.230]  wanted to solve and finish one of those. But again, I'd like to say thanks to DT for letting this
[23:08.230 --> 23:14.330]  happen. I mean, recently in my life, I've started being really interested in music. I mean, recently
[23:14.330 --> 23:20.410]  past like five years or so, I've started carrying around one of these guys with me. This is a Zoom
[23:21.070 --> 23:27.210]  recorder. You'll notice the XY recording head in there. I've been carrying one of these around with
[23:27.210 --> 23:35.690]  me pretty much everywhere I go. And when I hear interesting sounds or things out in the wild,
[23:35.690 --> 23:40.450]  I've been recording them and incorporating them into some music and things that I've been making.
[23:40.750 --> 23:47.990]  Maybe someday I'll start releasing things. I don't know. But again, thank you for coming to DEF CON
[23:47.990 --> 23:55.470]  safe mode. We hope that we can connect with everybody the best we can in these trying times.
[23:55.470 --> 24:00.730]  And let's try and have some fun and focus on some positive for a little while. I think we could all
[24:00.730 --> 24:08.010]  use it. So now back to you, Jeff. So if all went well, we're done with the intro. We're going to
[24:08.010 --> 24:13.210]  move on now to the question and answer session live. If I'm still here and Lasse is still here,
[24:13.210 --> 24:19.310]  you should see us popping up any minute in Discord in the chat. And we're ready to take any
[24:19.310 --> 24:25.830]  of your questions on community, history, why we're doing what we're doing, how you can get more out
[24:25.830 --> 24:31.310]  of the show. And really looking forward to seeing everybody. And thanks a lot for being here.
[24:35.770 --> 24:42.210]  Well, good afternoon, good evening, wherever you are. Hope you guys enjoyed that video. I am
[24:42.210 --> 24:48.110]  up in the top corner. You've got pasties and we are here with Lost and DT to answer some of your
[24:48.110 --> 24:57.150]  questions now that we've got through the video. Jeff, why don't you get started maybe? Why don't
[24:57.150 --> 25:02.050]  you tell us kind of maybe where you are, how you ended up where you are, and why you're stuck there?
[25:03.050 --> 25:09.470]  Yeah. Hey, everyone. Hey, thanks for watching that. Welcome to safe mode. Thank you for being
[25:09.470 --> 25:14.770]  here. It's been really cool just to be in LimeCon last week and watch everybody chat. It's
[25:14.770 --> 25:21.290]  actually been kind of cathartic to see everybody reconnect with their friends and have conversations
[25:21.290 --> 25:27.830]  that they would normally do in person. So super cool. Unfortunately, it's midnight here. I'm still
[25:27.830 --> 25:33.790]  in Singapore trap, but I've been drifting my time two hours a night. So the last week I've drifted
[25:33.790 --> 25:40.110]  and now this is my morning. It's weird. I get up at 11 p.m. at night to be on Pacific Time.
[25:40.750 --> 25:48.590]  All for the love of DEF CON. And I've got with me Lost. And normally what we do is we talk about
[25:48.590 --> 25:53.210]  the show, but I thought we've got a little bit of time. Let's do some Q&A. I'm sure everybody
[25:53.830 --> 26:01.590]  got questions and doesn't want to hear us talk anymore. So who wants to kick that off first?
[26:03.350 --> 26:11.130]  Let's see. I've got one maybe easy question. Where can we find out more about Lost streaming
[26:11.130 --> 26:15.430]  about music, science, and hacking? Do you have a podcast or something like that?
[26:16.970 --> 26:23.860]  I do live streams twice a week on Twitch. Tuesday nights is Transistor Tuesdays. It's more electronics
[26:24.330 --> 26:30.950]  and hacking focused. Lately, I've been teaching people how to build a 4-bit microcontroller from
[26:30.950 --> 26:37.250]  basic logic gates and or not all the way up to how to program an FPGA. The intention is to teach
[26:37.250 --> 26:42.090]  people where assembly and machine code come from, from a hacker's perspective and why you care,
[26:42.090 --> 26:46.050]  and to teach you the vocabulary to be able to have those conversations.
[26:46.050 --> 26:52.390]  Friday nights, I do a stream show called Down in the Park, which is an homage to Gary Neumann.
[26:52.790 --> 26:57.950]  And on that show, we talk about music and hacking and people that I consider music hackers and
[26:57.950 --> 27:04.530]  things like that. In fact, there will be a DEF CON dedicated Down in the Park crossover tonight.
[27:06.990 --> 27:16.170]  There is a link to Lost's Twitch in the track one DEF CON talk track channel,
[27:16.170 --> 27:18.610]  for anyone that's looking for more information about that.
[27:20.410 --> 27:26.990]  Cool. Let's see. CryptoCactus asks, are there any plans for making DEF CON safe mode an annual thing
[27:26.990 --> 27:35.840]  to happen alongside the physical event? So what you're witnessing right here
[27:36.940 --> 27:44.760]  is like all hands on deck. Everybody on deck for like three months. And there's no way we can do
[27:44.760 --> 27:51.100]  that on top of the main, you know, physical DEF CON. So it's either one or the other. There's just
[27:51.100 --> 28:00.250]  enough people to go around. There's been some talk about we could drastically reduce the Discord
[28:01.030 --> 28:07.330]  and then have reduced rooms and chat and some of the features that we like, but do it in parallel
[28:07.330 --> 28:13.230]  or use Discord as a sort of organizing tool for on site in Vegas. You know, all that is totally
[28:13.230 --> 28:18.990]  possible. It's just we can't have all the villages doing their villages in real life and online at
[28:18.990 --> 28:24.610]  the same time. I hope that answers your question. We're going to be making an announcement at
[28:24.610 --> 28:32.770]  closing ceremonies on what we decide to do with the Discord. Cool, cool. A question for Lost.
[28:32.770 --> 28:39.130]  You mentioned an additional Carl Sagan quote on your stream last night. There's one in plain text
[28:39.130 --> 28:44.990]  on the liner and the one on the site that you just showed in this talk and another in a Pascal case
[28:44.990 --> 28:50.050]  found via the cassette. Is there another one that somebody should have found already?
[28:50.670 --> 28:55.970]  There are more that you can't get to yet and it's kudos for using Pascal case instead of
[28:55.970 --> 29:01.970]  camel case correctly. And a little bit of trivia for you, our badge this year for DEF CON is the
[29:01.970 --> 29:08.350]  cassette. Carl Sagan wrote all of his notes, took all of his notes for all of his creative works
[29:08.350 --> 29:14.970]  on cassette tape. Most people don't know that. He dictated 90. Even the notes that are in the
[29:14.970 --> 29:20.790]  contact, he still did the original dictation and notes for himself on cassette tapes. So the cassette
[29:20.790 --> 29:31.340]  in a weird roundabout sort of way is also kind of an homage to Carl Sagan. So I've got another
[29:31.340 --> 29:38.780]  question about the tapes. Is the audio distortion unexpected? Are the tape contents different?
[29:38.780 --> 29:47.100]  How do we get flax of artist goon? Just go to media.DEFCON.org and we've got an archive of the
[29:47.100 --> 29:52.640]  lossless versions. And if you want to play the badge challenge that Lost created, everything you
[29:52.640 --> 29:58.620]  can have, everything you need to play the game or try to solve the puzzle is in an archive file
[29:58.620 --> 30:06.220]  just on the media server there. Like pictures of the lanyard, the liner notes, and the audio tape.
[30:07.120 --> 30:11.800]  To piggyback on what Jeff just said too and to answer more of the question,
[30:11.800 --> 30:16.820]  the original master tape that we had, it's no secret at this point, I'm sure enough
[30:16.820 --> 30:22.180]  people have talked about it online, if you stereo channel the XY from the tape into an oscilloscope
[30:22.180 --> 30:26.800]  it does draw things and give you some text and some graphics and things like that.
[30:28.260 --> 30:32.520]  The original master tape function is just fine, but the cleanest way to get that
[30:32.520 --> 30:39.340]  is to just go to the DEFCON media servers and get the digital copy. It's just going to work the best.
[30:40.140 --> 30:44.980]  Well we tried to get the best quality audio tape, right? I mean there wasn't a grade of
[30:44.980 --> 30:50.380]  tape higher that we could purchase. Correct, not at this point in time. It manufactured itself
[30:50.380 --> 30:55.420]  during COVID times. There were times when I was on the phone with the fabrication house and they
[30:55.420 --> 31:01.040]  just didn't have people on staff at the time to do things because people weren't going into work.
[31:04.760 --> 31:10.660]  Yeah, that's interesting. There's one place in the world that would make the audio
[31:10.660 --> 31:17.100]  tape shells. There's a couple places to get the audio tape. I mean it's so limited. The supply
[31:17.100 --> 31:24.040]  chain is so optimized, but it's so fragile. And there's no there's no real competition
[31:24.040 --> 31:31.640]  not for mass publication of tapes for duplication. Tell me about the quantity,
[31:31.640 --> 31:38.980]  like how the quantities are so low. So just like when we did the record, because we're using
[31:38.980 --> 31:46.380]  older media and older formats, when we do a run for DEFCON, we actually technically should chart
[31:46.940 --> 31:52.940]  because we pass the normal quantity of production. Like most people are ordering two, three hundred
[31:52.940 --> 31:58.940]  tapes, you know, maybe a thousand, and we're blowing that away. Same thing, like one of the
[31:58.940 --> 32:03.660]  guys that did the record pressing for us the year we did the record said, you made more vinyl this
[32:03.660 --> 32:10.240]  year than Taylor Swift. Wow. Because we did. Because everything's digital distribution or CDs,
[32:10.240 --> 32:15.900]  not vinyl. It's a niche market. It's growing. Same thing with cassettes. Cassettes are starting to
[32:15.900 --> 32:21.440]  make a comeback, mostly for nostalgia purposes. One of the things I was going to throw out to
[32:21.440 --> 32:26.680]  watch people have a geek fight about is the discussion and argument about whether or not
[32:26.820 --> 32:34.950]  a cassette tape is digital or analog. And there is an answer, but I'll leave it as an exercise
[32:34.950 --> 32:42.670]  to the reader. We were going to try to put an RFID chip inside each case as the cases were
[32:42.670 --> 32:47.590]  being assembled, but it just ran out of time. Yeah, they didn't have humans on staff able to
[32:47.590 --> 32:52.830]  do that. So the shells, like Jeff was talking about, in the video you saw, I held up some clear
[32:52.830 --> 32:58.110]  tapes. The intention of that was that we were going to put RFID tags behind that solid piece,
[32:58.110 --> 33:03.150]  but they just didn't have the manpower to crack the tapes and feed them in. So it's not like,
[33:03.150 --> 33:07.570]  and kudos to badge life, but when you're making 200 of something versus, you know, thousands,
[33:08.170 --> 33:12.150]  we just didn't have the resource to do it. And I don't mean in terms of we,
[33:12.150 --> 33:16.570]  like the people just weren't there. It didn't even have anything to do with cost or anything
[33:16.570 --> 33:19.630]  like that. It had to do with the fact that we just didn't have the humans.
[33:20.750 --> 33:25.990]  So continuing along with the questions about the badges, someone wants to know
[33:25.990 --> 33:33.210]  where to submit the badge forum or the badge attachment.
[33:34.910 --> 33:39.470]  So as people who are playing the game know, there are certain websites that have not gone live yet.
[33:39.470 --> 33:44.310]  I'm going to drop that information into the DEF CON forums, actually, after we finish this
[33:44.310 --> 33:49.870]  discussion, but I've intentionally held that back because we wanted that to be a secret contest.
[33:50.150 --> 33:54.750]  And for those of you who follow DEF CON and myself on Twitter, somebody actually started
[33:54.750 --> 33:58.830]  doing it on their own. And they were like, we're going to do a contest for connecting the tapes.
[33:58.830 --> 34:04.630]  And El Cantaro actually did a video of using a rubber band origami thing. And I had to jump in
[34:04.630 --> 34:10.350]  and say, it's really cool. And I don't want to be the jerk guy that steps on you, but we're kind of
[34:10.350 --> 34:11.470]  going to do that.
[34:13.490 --> 34:17.130]  That's super cool, though. I love how the community just kicks off.
[34:17.130 --> 34:24.330]  So watch the DEF CON forums after this and I get something to drink. More Mountain Dew.
[34:24.450 --> 34:29.510]  Or as my daughter calls it, Daddy's Green Drink.
[34:31.610 --> 34:34.090]  So I've got a question for Jeff here.
[34:35.450 --> 34:43.430]  This is kind of a big picture. How has the focus of the CON changed since the CON got started 28 years ago?
[34:45.690 --> 34:59.890]  Well, 28 years ago, we were quite a different crew of people. So I would say the analogy I make is imagine you were playing rock and roll in garages in
[35:00.530 --> 35:06.610]  Haight-Nashbury or wherever in San Francisco. And you're making the music you love to make, grunge and battle, whatever.
[35:06.610 --> 35:13.290]  You're making the music you love to make. You're showing it off to your friends. Your friends are making music. It's awesome.
[35:13.550 --> 35:20.450]  And then somebody shows up in a car with a lot of money and says, hey, you know, you can get on a jet airplane with me and we can go to Europe.
[35:20.450 --> 35:25.650]  And everybody in Europe can hear your music, too. And next thing you know, there's money involved.
[35:25.650 --> 35:33.930]  There's jobs and there's prestige and more ego. And that was I mean, that happened to us, I think, in the early 2000s.
[35:34.010 --> 35:40.530]  And then it went from being your hobby that you loved and do potentially into a career.
[35:40.690 --> 35:51.110]  And that was an interesting mental break for a lot of people. You know, you talk to creative people and they're either professionally creative in the sense that they create nine to five.
[35:51.110 --> 35:59.170]  They either go to Disney and create or an ad agency. And there are those that are not professionally creative. They do it when they feel inspired.
[35:59.650 --> 36:06.970]  And that sort of forks the community a little bit. And so I think what we've seen is just the community growing up.
[36:07.010 --> 36:15.830]  And you can see DEF CON, we're trying to respond to that a little bit over the last four or five years where we keep trying to draw this distinction that we don't want to be info tech.
[36:15.830 --> 36:23.830]  We want to be hackers. And there's a difference there. And it's different. It's not one's good, one's bad. It's just we're different.
[36:23.830 --> 36:31.310]  And we're trying to not be the professionally creative, where it's your job and you have to perform and do the enterprise thing.
[36:31.670 --> 36:37.670]  We want to be you're here because you're trying to do something exciting and interesting.
[36:37.670 --> 36:43.130]  And maybe you fail and the whole thing burns down in front of you. But that sounds fun.
[36:43.130 --> 36:45.310]  I don't know. What do you think, Lars?
[36:46.470 --> 36:56.370]  Yeah, my best memories of DEF CON are always with the folks that, like you said, that are passionate about it and it's more like a hobby.
[36:56.470 --> 37:06.030]  Although a lot of the folks that are like that have found clever ways of hacking even their professional life to incorporate the things that they enjoy.
[37:06.330 --> 37:12.310]  And I would say so many of the volunteers and people who work with DEF CON have done that.
[37:12.310 --> 37:16.490]  They're hackers in every sense of the word, including their own life.
[37:20.000 --> 37:28.680]  Last question for you, Damon from Meyers Circle asks, how many years has it been since the last mystery challenge?
[37:29.020 --> 37:35.380]  Do you think this is kind of the final level? And then they also ask, do you have the glow?
[37:36.300 --> 37:37.320]  Do I?
[37:38.000 --> 37:41.680]  We have the glow. We need the glow to go. We feel the glow.
[37:41.680 --> 37:52.000]  Sure enough. Julius Carey III is who you're referring to there plays, sure enough, in Barry Gordy's The Last Dragon.
[37:52.000 --> 37:57.220]  Yes, my mind holds all of that stuff, not consciously. It just happens to be in there.
[37:58.600 --> 38:05.540]  Mystery challenge in the original incarnation was about eight years ago for the last one.
[38:05.540 --> 38:13.140]  And then we kind of moved over into the badge. We kind of did a resurgence for some anniversary years and things like that.
[38:13.240 --> 38:18.380]  And I wouldn't say final level for the glow. I would say this is more of an iteration.
[38:18.380 --> 38:25.120]  And I think of it as the phoenix, you know, a fabulous bird reborn from the ashes of its former self.
[38:25.120 --> 38:30.360]  Also the tutor of Achilles for those of you who are 2001 and 2010 fans.
[38:31.980 --> 38:34.280]  If you know that reference.
[38:35.740 --> 38:43.080]  Kind of on the on a funnier side, we've got one person asking you if it's milkshake o'clock yet.
[38:43.300 --> 38:45.460]  It's always milkshake o'clock.
[38:48.100 --> 38:56.800]  I can't tell you how many years at DEF CON where we would do milkshake o'clock and then like three hours later, someone else would come up and we wouldn't want them to feel excluded.
[38:56.800 --> 39:06.220]  And so we would do it again. And like one year, I'm sure I'm going to become diabetic in my later life from all of the milkshakes that I've downed.
[39:06.380 --> 39:12.740]  We have like four milkshakes within the space of six hours. It's almost like that's a challenge in and of itself.
[39:14.660 --> 39:16.640]  You're not eating hot dogs.
[39:18.000 --> 39:27.160]  A fun thing to share is for those of you who were on the live stream last night, somebody actually stole a pair of grifter shoes and got them to me.
[39:27.160 --> 39:35.640]  And I got them this week, which is part of an homage to the original Mystery Challenge stuff with grifter playing and people trying to steal his shoes.
[39:36.680 --> 39:38.260]  So that's amazing.
[39:39.680 --> 39:53.160]  Well, good stuff. We are about 10 after the hour. So maybe both of you gentlemen, do you have anything to share with everybody that's come to the Q&A before we get back to the regular schedule?
[39:54.020 --> 39:58.640]  We have to pick one last question. Who's going to be?
[40:01.100 --> 40:01.900]  Hmm.
[40:05.300 --> 40:16.080]  I mean, this one's a little bit intense, but what do you think the future of hackerdom is? We've come so far in 28 years and things have changed so much. When do we hit a critical mass?
[40:17.820 --> 40:19.040]  You want me to go first?
[40:21.700 --> 40:37.920]  I think it's... I don't have an answer for you, but after about 10 years of DEF CON, and by then it was like four or five years of Black Hat, I was pretty certain that there's a finite number of people that will get on an airplane and fly to Vegas.
[40:38.300 --> 40:42.260]  There just is. They care about this stuff. There just can't be that many people in the world.
[40:42.260 --> 40:56.880]  And every year it grew, and it's grown every single year for 20-something years. And so my opinion doesn't really count because I've been wrong every year. Every year I just think, well, that's it. That's as many people as there are in the world.
[40:56.880 --> 41:24.680]  But also living in Seattle, I think every year Amazon hires a thousand people. It's just crazy. So I don't know where the top is, but what I think happens is in the early days, the only people that cared about this stuff was us, and it was network, and then it was banking, and then it was financial and military, and then it was access control, and then it was industrial control systems and physical access control, and then it's robots.
[41:24.680 --> 41:49.120]  It seems to be then it's smart cars. Now it's hack the sea and hack the satellite. So I don't think we've reached the top yet. I think what's happening is everybody's specializing. And so to make a name for yourself and to try to feel like you understand your domain, you're trying to simplify your life and you're trying to specialize to make a name for yourself. And that means we're squeezing out some generalists.
[41:49.860 --> 42:07.600]  So I guess if I do have a call for anything, it's yes, do what you have to do to succeed in your career, but please try to also become a generalist because we're now probably year five or six of hackers becoming involved in policy and now decision makers.
[42:07.600 --> 42:24.440]  Now congresspeople are young enough that they've grown up with computers. And so I think what's going to happen is we're going to have gone from a specialty to just we're like another component, security and health care, security and automotive, security and policymaking.
[42:24.440 --> 42:32.140]  So I think there's plenty of room for us to grow. It's just we have to widen our horizons and think bigger.
[42:32.140 --> 42:44.720]  I think our influence in society and importance in society is just going to grow. I'm sorry if I'm taking a long answer to this, but remember when you first started watching TV shows and the hacker would be there?
[42:44.720 --> 42:55.400]  They'd be like the one hacking character. And the purpose of the hacking character was to type at the keyboard, find me the car. Okay, I'll use the kaleidoscope. Oh, they're in San Diego.
[42:55.400 --> 43:10.840]  And that was the purpose. It's like the MacGuffin. It was to move the plot along. The hacker would type some keys and move the plot along. But now you see with like Mr. Robot, other shows, the hackers or the security people, they're full characters. They're full people now.
[43:10.880 --> 43:16.380]  We're getting baked in. We're not the oddball anymore. I think that'll continue.
[43:17.300 --> 43:21.920]  You know that and when we create the Mentat political party, right?
[43:25.280 --> 43:36.580]  I can't add anything more to what Jeff said from the top down, but what I feel like is my personal mission in life is to go from the bottom up and that is next generation and kids.
[43:36.580 --> 43:54.940]  I think we are quickly as a society getting to the point where we're teaching kids to not be hackers or tinkerers, whether it's making exploration illegal or tinkering. We're teaching kids that electronics are dangerous or expensive and that you don't own your device. Don't open it. Don't learn how it works. Don't explore.
[43:54.940 --> 44:22.440]  And so some of the freedoms that I had as a kid, kids are terrified to do these days because things are illegal or whatever. And I think things like DEF CON helping to get that next generation to open the door. And we live in a magical time too, because now we have the benefit of virtualization, both for hardware and software. And so it's like we should see a resurgence of the tinkerers. And I'm looking for the next Forrest Mimms because I know he or she is out there.
[44:27.200 --> 44:32.180]  So we'll be around. You're going to be around, Lost, in your Mystery Challenge room.
[44:32.180 --> 44:35.020]  Yep, I'll be all throughout Discord.
[44:35.460 --> 44:40.980]  Yep, I'll be floating around. Glad everybody's here. Have a good time.
[44:41.540 --> 44:47.000]  Thank you guys both for joining us. Thank you everyone in the Q&A for asking questions.
[44:49.520 --> 44:51.980]  We will see you guys around.
